Vulnerabilities

TI-2026-47351 CVE-2026-66683 · GHSA-2qq4-p3mf-f362

WordPress Custom CSS and JavaScript plugin <= 2.0.16 - Sensitive Data Exposure vulnerability

LOW 30

Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0033 Published 2026-08-06 No fix listed CWE-201

TI-2023-28315 CVE-2023-51668 · GHSA-cpmc-862m-r48v

WordPress Inline Image Upload for BBPress Plugin <= 1.1.18 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in WP Zone Inline Image Upload for BBPress.This issue affects Inline Image Upload for BBPress: from n/a through 1.1.18.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00227 Published 2024-01-05 No fix listed CWE-352

TI-2023-17977 CVE-2023-35912 · GHSA-4wj9-c75j-279x

WordPress Potent Donations for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in WP Zone Potent Donations for WooCommerce plugin <= 1.1.9 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00341 Published 2023-07-10 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Custom CSS and JavaScript plugin <= 2.0.16 - Sensitive Data Exposure vulnerability

WordPress Inline Image Upload for BBPress Plugin <= 1.1.18 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Potent Donations for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)